Certificate

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
File:                     7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer (raw, json)
Hash identifier:          5AD7CElygMMgTrWKB2GPBsEHWNPnSq66uY/gj1QYdBE=
Subject key identifier:   7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C81EB9D35AD81077451F75C2FA7137816929BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest:                 rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
caRepository:             rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/
Notify URL:               https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Oct 2024 08:12:45 +0000
Certificate not after:    Tue 28 Oct 2025 08:17:45 +0000
Subordinate resources:    IP: 103.142.60.0/23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:81:eb:9d:35:ad:81:07:74:51:f7:5c:2f:a7:13:78:16:92:9b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct 29 08:12:45 2024 GMT
            Not After : Oct 28 08:17:45 2025 GMT
        Subject: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:64:03:fe:96:18:e0:f1:b2:19:ca:a9:50:
                    72:8a:11:8c:00:2d:cd:55:10:da:b8:0c:ae:3d:57:
                    5f:f7:ad:e0:e1:b4:98:c2:83:c8:1c:42:c8:01:ef:
                    1d:1b:14:8b:18:03:6a:03:9d:e5:5a:ce:37:94:21:
                    35:9c:12:3d:99:f6:11:37:5e:1d:1a:1c:37:7f:6a:
                    27:d2:4a:4e:35:d5:c9:45:92:f3:aa:95:3f:fd:b9:
                    c1:29:0b:45:cc:c5:38:d5:c3:bf:a8:00:5e:f2:25:
                    8c:5a:72:dd:a8:c2:fe:10:45:6a:eb:0c:1e:b0:8a:
                    ff:e0:7f:0c:99:55:a0:d2:0b:b7:39:a3:2c:22:c3:
                    99:74:e4:9c:cd:a7:89:cb:8b:bb:11:c5:93:28:90:
                    e1:49:ba:75:d3:d4:ee:19:8e:f0:d8:2a:ba:e0:71:
                    43:1d:89:12:f5:df:b6:55:f4:47:ef:24:78:7d:bd:
                    3e:3c:52:bb:9a:28:ed:f1:8a:0e:39:14:3c:07:e0:
                    e6:cd:de:60:53:9f:51:04:9e:92:42:0e:e3:76:19:
                    f4:bc:ba:5c:b2:87:c9:ca:ae:60:5f:73:e9:cf:53:
                    5a:13:76:88:76:85:5e:74:6e:aa:bd:be:f2:85:32:
                    79:a0:65:21:e7:d2:0f:eb:26:df:0e:7e:99:d3:80:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0
                RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:1f:43:0b:7c:b7:ce:2f:92:58:59:3e:bf:81:88:8b:ad:
         da:e7:7f:33:d0:58:d2:73:5a:8c:c8:24:13:c4:07:5b:be:cb:
         0c:a5:fd:91:15:d7:49:59:1d:29:ea:11:35:76:41:0d:87:26:
         cf:ed:45:ae:d3:a4:af:62:db:dd:21:04:6d:5f:a1:6d:0e:41:
         67:6d:c4:ee:c3:37:5b:11:27:7b:0c:c8:0a:35:07:1e:1b:70:
         c9:13:e3:6d:a3:3f:57:3f:b5:f2:a2:d3:0f:ac:e6:ca:85:03:
         f4:15:73:e4:e4:5f:97:c6:7e:27:d3:88:e5:5d:d5:ce:f9:01:
         b7:b5:ab:48:42:f2:0f:11:91:95:a3:d9:80:e2:84:ec:1e:b3:
         95:43:3b:fe:d6:ee:e0:45:66:60:b8:af:83:dc:69:3a:e4:e0:
         ed:d5:60:a1:84:52:7e:4b:99:05:f0:c3:c6:35:12:b4:53:ed:
         87:0c:3c:6f:6a:c0:43:34:41:6c:86:c8:aa:fd:4b:5d:f1:0f:
         00:4b:2c:c8:45:0d:8c:b1:e4:1e:ce:11:8d:97:0f:20:3f:8d:
         07:e1:9d:64:85:c8:a0:35:d0:bf:d2:3a:4b:9b:58:bf:0f:50:
         6d:e5:4f:7f:45:bc:85:51:1f:46:c9:61:6d:89:1e:85:08:d3:
         8c:50:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org